Vulnerabilities

TI-2017-12745 CVE-2017-17446 · GHSA-pwfg-g35m-wrcw

The Mem_File_Reader::read_avail function in Data_Reader.cpp in the Game_Music_Emu library…

LOW 32

The Mem_File_Reader::read_avail function in Data_Reader.cpp in the Game_Music_Emu library (aka game-music-emu) 0.6.1 does not ensure a non-negative size, which allows remote attackers to cause a denial of service (applic…

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.01326 Published 2017-12-06 No fix listed CWE-681

TI-2016-08067 CVE-2016-9961 · GHSA-468v-hjgx-r39h

game-music-emu before 0.6.1 mishandles unspecified integer values.

MEDIUM 49

game-music-emu before 0.6.1 mishandles unspecified integer values.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04364 Published 2017-06-06 No fix listed CWE-189

TI-2016-08066 CVE-2016-9960 · GHSA-h99v-mrwp-7gw9

game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).

LOW 25

game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0053 Published 2017-06-06 No fix listed CWE-369

TI-2016-08065 CVE-2016-9959 · GHSA-fr5p-jv24-2gw9

game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.

LOW 39

game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.0233 Published 2017-04-12 No fix listed CWE-125

TI-2016-08064 CVE-2016-9958 · GHSA-jvrm-7h8w-chxm

game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.

LOW 39

game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.0233 Published 2017-04-12 No fix listed CWE-119

TI-2016-08063 CVE-2016-9957 · GHSA-x8w4-hgv4-rjx8

Stack-based buffer overflow in game-music-emu before 0.6.1.

LOW 38

Stack-based buffer overflow in game-music-emu before 0.6.1.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01928 Published 2017-04-12 No fix listed CWE-119

Vulnerabilities

Filters

The Mem_File_Reader::read_avail function in Data_Reader.cpp in the Game_Music_Emu library…

game-music-emu before 0.6.1 mishandles unspecified integer values.

game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).

game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.

game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.

Stack-based buffer overflow in game-music-emu before 0.6.1.